348 	struct sg_header *old_hdr = NULL;  in sg_read()  local
359 		old_hdr = kmalloc(SZ_SG_HEADER, GFP_KERNEL);  in sg_read()
360 		if (!old_hdr)  in sg_read()
362 		if (__copy_from_user(old_hdr, buf, SZ_SG_HEADER)) {  in sg_read()
366 		if (old_hdr->reply_len < 0) {  in sg_read()
384 			req_pack_id = old_hdr->pack_id;  in sg_read()
419 	if (old_hdr == NULL) {  in sg_read()
420 		old_hdr = kmalloc(SZ_SG_HEADER, GFP_KERNEL);  in sg_read()
421 		if (! old_hdr) {  in sg_read()
426 	memset(old_hdr, 0, SZ_SG_HEADER);  in sg_read()
427 	old_hdr->reply_len = (int) hp->timeout;  in sg_read()
428 	old_hdr->pack_len = old_hdr->reply_len; /* old, strange behaviour */  in sg_read()
429 	old_hdr->pack_id = hp->pack_id;  in sg_read()
430 	old_hdr->twelve_byte =  in sg_read()
432 	old_hdr->target_status = hp->masked_status;  in sg_read()
433 	old_hdr->host_status = hp->host_status;  in sg_read()
434 	old_hdr->driver_status = hp->driver_status;  in sg_read()
437 		memcpy(old_hdr->sense_buffer, srp->sense_b,  in sg_read()
438 		       sizeof (old_hdr->sense_buffer));  in sg_read()
445 		old_hdr->result = 0;  in sg_read()
450 		old_hdr->result = EBUSY;  in sg_read()
457 		old_hdr->result = EIO;  in sg_read()
460 		old_hdr->result = (srp->sense_b[0] == 0 &&   in sg_read()
464 		old_hdr->result = EIO;  in sg_read()
470 		if (__copy_to_user(buf, old_hdr, SZ_SG_HEADER)) {  in sg_read()
475 		if (count > old_hdr->reply_len)  in sg_read()
476 			count = old_hdr->reply_len;  in sg_read()
484 		count = (old_hdr->result == 0) ? 0 : -EIO;  in sg_read()
488 	kfree(old_hdr);  in sg_read()
538 	struct sg_header old_hdr;  in sg_write()  local
556 	if (__copy_from_user(&old_hdr, buf, SZ_SG_HEADER))  in sg_write()
559 	if (old_hdr.reply_len < 0)  in sg_write()
581 		if ((opcode >= 0xc0) && old_hdr.twelve_byte)  in sg_write()
588 	mxsize = (input_size > old_hdr.reply_len) ? input_size : old_hdr.reply_len;  in sg_write()
601 		hp->dxfer_direction = (old_hdr.reply_len > SZ_SG_HEADER) ?  in sg_write()
611 	hp->timeout = old_hdr.reply_len;	/* structure abuse ... */  in sg_write()
613 	hp->pack_id = old_hdr.pack_id;  in sg_write()
629 			       old_hdr.reply_len - (int)SZ_SG_HEADER,  in sg_write()